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Chip card Including tamper-proof security features 

BACKGROUND OF THE INVENTION 

Field of the Invention 

5 The present invention generally relates to the protection against tampering 
of security features incorporated In chip cards. 

Background art 

10 A chip card comprises a card body and a chip module which is embedded 
in the card body and incorporates an integrated circuit (IC). 
In addition to the embedded IC, so-called "security features" are often 
present on the surface of the card body. As a matter of fact, since smart 
cards are often used for authorising certain operations or to personally 

15 identify the holder of the card, it is necessary to include in the card some 
physical features that may be characterised on visual inspection, in con- 
trast to authentication algorithms which rely on the exchange of signals 
with the microprocessor of the IC. 

There has been proposed a number of security features, such as a photo- 
20 graph of the holder of the card, holograms, hologram-like features such as 
multiple laser images (MLI), laser engraving of individual data such as 
name and card number, etc. These features are created directly on the 
card body at the manufacturing stage, or maybe added at a later stage in 
the course of the personalization step of the blank card. 
25 A problem nevertheless remains in ensuring integrity and security of the 
card. Though it is generally difficult to modify features as holograms, laser 
engraving, etc. without blatant alteration of the card, there exists some 
simple frauds consisting e.g. in peeling as a whole a layer of the card to 
replace printed or engraved information, still keeping unchanged the other 
30 layers of the cards and the chip module. Photographs printed on a card, 
like on driving licenses, passport, etc. are usually the first targets of such 
physical attacks. 
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Another attack consists in keeping the card body with all its security fea- 
tures as such, but removing the chip module and replacing it by a counter- 
feited module or a module taken from another card. 
In order to make such physical attacks more difficult or render them more 
5 apparent in case of alteration of the card, multiple, different security fea- 
tures are incorporated in a single card and/or more and more sophisti- 
cated security features are used. 

However, this makes the manufacturing process more complex and more 
expensive, white remaining vulnerable to some kinds of physical attacks 
10 such as exchanging the IC or peeling as a whole the layer incorporating 
the different security features. Thus the security features proposed so far, 
despite their sophistication, are not really tamper-proof and are still open 
to some kind of physical attacks. 

1 5 SUMMARY OF THE INVENTION 

It is therefore an object of the invention to provide a chip card protected 
against any physical attacks applied to a card containing security features, 
which can work as a tamper-proof feature making the card irreversibly 
20 non-functional in case of any attempt of such kind of fraud. 

Another object of the invention is to provide such a tamper-proof chip card 
which may be manufactured through conventional manufacturing proc- 
esses, and in a way cheaper than most security features like holograms or 
laser engraving. 

25 A further object of the invention is to provide such a chip card enabling a 
reduction of the number of different security features needed to protect 
the card and the IC, hence with a lower manufacturing cost. 
A still further object of the invention is to provide such a chip card which 
may be protected at once against both physical attacks like layer peeling 

30 and IC exchange. 

A still further object of the invention is to provide a chip card in which the 
protection is obtained through incorporation of features which are invisible 
or near invisible to human eye in daylight, making it difficult to detect when 
the card is visually inspected in daylight. 
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More specifically, the Invention provides a chip card comprising a card 
body and a chip module embedded In the card body and incorporating an 
integrated circuit, said card body including at least one security feature 
incorporated in a layer, or applied on a surface, of the card body. 

5 According to the invention, the card body comprises an additional tamper- 
detection layer including a conductive pattern forming an electrical loop 
connected between terminals of the integrated circuit, the conductive pat- 
tern having at least one region located beneath or above the security fea- 
ture. Further, the integrated circuit is adapted to perform an integrity check 

10 of the conductive pattern for conditionally performing further operations 
only in case said integrity is recognized. 

The conductive pattern having a given impedance or resistance, the inte- 
grated circuit may be adapted to check whether said Impedance or resis- 
tance matches a predetermined value stored in a memory of the inte- 
15 grated circuit. 

In case said chip card includes contactless communication features, the 
conductive pattern may be part of a tuned circuit co-operating with the in- 
tegrated circuit for contactless communication. 

The security feature may be one from the group Including photograph, 
20 hologram, multiple laser image, laser engraving, UV/IR-readable pattern 
and magnetically-readable encoding. 

Preferably, the conductive pattern is made from a conductive ink material 
and from a transparent or near transparent material. It is advantageously 
connected to the terminals of the integrated circuit through permanent 
25 bonds. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing and other objects, aspects and advantages of the invention 
30 will be better understood from the following detailed description of a pre- 
ferred embodiment of the invention with reference to the appended draw- 
ings, in which the same numerals refer to identical or functionally similar 
features over the different figures. 

Figure 1 is a schematic, exploded view of a card incorporating the security 
35 feature according to the invention. 
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Figure 2 is a plan view of the specific security layer of the card of Figure 1 . 

DETAILED DESCRIPTION OF 
A PREFERRED EMBODIMENT OF THE INVENTION 

5 

Referring now to the drawings, Figure 1 illustrates an exemplary embodi- 
ment of a card incorporating the security features of the invention. 
This card comprises a card body 10 and a chip module 12 including an IC, 
typically an IC with a microprocessor-based chip allowing Inter alia execu- 
10 tlon of suitable authentication, decryption, etc. algorithms for the prelimi- 
nary identification of the user of the card. 

The most common process for manufacturing a chip body is by lamination 
of a plurality of layers each made from a plastic foil. Card body 10 at least 
includes a base layer 14 and an upper layer 16 with a hole 18 punched or 

1 5 milled in order to form a recess for receiving the chip module 1 2. 

The upper layer 16 includes one or several so-called "security features" 
such as a photograph 20 of the authorized user of the card, or personal 
identification data written by laser engraving 22. There exist a number of 
other security features, which are all well-known from the man skilled in 

20 the art such as holograms, multiple laser image, patterns or characters 
which are not visible under normal daylight but become apparent under 
UV or IR light, magnetically-readable encoding, etc. All such "security fea- 
tures" are features which are only of a physical nature, as opposed to 
identification, authentication and like functionalities involving processing of 

25 data by the IC incorporated in chip module 12. 

The invention essentially lies in the incorporation in the card body of an 
additional layer 26, hereafter called "security layer", enabling detection of 
any alteration of the security features present on upper layer 16, attempts 
of peeling upper layer 16, or removal of the chip module 12 from the card 

30 in the case of fraud by IC exchange. 

As better shown on Figure 2, security layer 26 includes a conductive pat- 
tern 28 forming a pathway running on the surface of layer 26 and having 
regions such as 30 and 32 which are located beneath security features 20 
and 22 (shown in broken lines) of upper layer 16. 
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Conductive pattern 28 tonus an electrical loop between end pads 34, 36 
which are connected by suitable means to terminals of the IC embedded 
In module 12. 

Basically, conductive pattern 28 acts as a switch that permanently and 
5 irreversibly deactivates the IC in case the circuit is broken due to fraudu- 
lent peeling of upper layer 16 or removal of chip module 12. 
Preferably, conductive pattern 28 is devised with specific electrical proper- 
ties such as a given impedance or resistance, the IC being adapted to 
check whether said impedance or resistance matches a predetermined 
1 0 value stored In a memory of the IC. 

For instance, peeling off the upper layer 16 will alter these electrical prop- 
erties, which will not longer match the value stored within the IC, blocking 
any proper operation of the latter. 

It is in particular possible to customize conductive pattern 28 in order to 
15 modify the electrical properties from one batch to the other and load the 
corresponding value in the IC memory during personalisation of the card, 
so that any attempt to exchange the module will result in a mismatch mak- 
ing IC operation impossible. 

In case of contactless systems, or hybrid contact/contactless systems, 
20 conductive pattern 28 may constitute an antenna being part of a tuned 
circuit involved In contactless operation. 

Many variants of the invention may be considered, and the above descrip- 
tion is just given by way of example. 

For instance, security layer 26 is not necessary located below layer 16 
25 bearing security features to be protected. In other embodiments, the secu- 
rity layer may as well overlay the security features, the conductive pattern 
being in this case preferably made from a transparent or near transparent 
material. 

Conductive pattern 28 may be formed from any known material. Prefera- 
30 bly, it is made from conductive ink, which makes it easy to form by con- 
ventional techniques such as screen printing. There exist a number of 
conductive materials such as conductive polymer resins. The material and 
arrangement of pattern 28 may be chosen so as to be invisible or nearly 
invisible to human eye in daylight, making it difficult to detect thereof. 
35 Transparent or clear conductive material may be used, or may be devised 
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in order to make it hardly visible, for instance a grey pattern applied on 
grey layer background. 

Security layer 26 may be provided for as a layer added In the course of 
the lamination process, whenever the card is manufactured this way. 
5 However, this is not restrictive and the security layer may be used in con- 
junction with cards made by other manufacturing processes, for instance 
the security layer may be added onto a moulded card body before, or dur- 
ing, the personalization stage. 
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